A JavaScript checker and optimizer.
- closure-compiler
- javascript
- optimization
- typechecking
Repository Index
68,261 visible repositories in the index
1–24 of 33 · Most stars
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
Catch common Java mistakes as compile-time errors
- java
- static-analysis
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
TypeScript Compiler API wrapper for static analysis and programmatic code changes.
- typescript
- ast
- code-generation
- javascript
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
- code-property-graph
- compiler-theory
- program-analysis
- robdd
Pretty good call graphs for dynamic languages
A model checker for Rust programs.
- rust
- model-checking
- verification
Dafny is a verification-aware programming language
- programming-language
- verification
Interactive visualizations of Rust at compile-time and run-time
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
- static-analysis
- software-verification
- abstract-interpretation
- program-analysis
A Python tool to visualize + enforce dependencies, using modular architecture 🌎 Open source 🐍 Installable via pip 🔧 Able to be adopted incrementally - ⚡ Implemented with no runtime impact ♾️ Interoperable with your existing systems 🦀 Written in rust
- ci
- cli
- developer-tools
- open-source
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
- license
- copyright
- packages
- dependencies
Complex code hides connections, workflows, and business risks.Unvibe complex code. Trace business workflows.
- business-logic
- code-analysis
- code-understanding
- codebase-analysis
A semi-opinionated library which is a source generator and a code analyser. It Source generates Value Objects
- csharp-sourcegenerator
- hacktoberfest
- patterns
- contributions-welcome
Set of roslyn-based analyzers for catching common C# errors (inspired by Google's error-prone)
Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Command line program that detects unused resource strings in an iOS or OS X application.